Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
File: m9upUpCphaaXdj0wq0L5w3hAeLI.mft (raw, json)
Hash identifier: G5VKmrqFKx8uYlBFj7JJ9ioGbGskFB2hteYFgAw5w28=
Subject key identifier: 6E:9C:5B:3A:E9:DC:25:9E:26:CE:0A:8A:00:A1:2E:1B:F7:13:17:59
Authority key identifier: 9B:DB:A9:52:90:A9:85:A6:97:76:3D:30:AB:42:F9:C3:78:40:78:B2
Certificate issuer: /CN=9bdba95290a985a697763d30ab42f9c3784078b2
Certificate serial: 019A5307B1528B3667C0E9D473565665B80B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
Manifest number: 0D8A
Signing time: Wed 05 Nov 2025 08:00:04 +0000
Manifest this update: Wed 05 Nov 2025 08:00:04 +0000
Manifest next update: Thu 06 Nov 2025 08:00:04 +0000
Files and hashes: 1: CYD_Z2qF6mHZ92tY0ftxYfveSAQ.roa (hash: IVgjWp28wTnlbtVuEQ1FT4HkeEGAz5yGW6fM8IpM3RI=)
2: m9upUpCphaaXdj0wq0L5w3hAeLI.crl (hash: s/DbBJOsAdg5/8Xhf+QtqH0inkXDexd5KY2VJiVIcVc=)
3: tLilW5BDEJTEzIEDh8KmIyaiPZU.roa (hash: vFC4JGd2bQPNjS7TqFQa5G/kgv43UH1kGodWdHda2yA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:07:b1:52:8b:36:67:c0:e9:d4:73:56:56:65:b8:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bdba95290a985a697763d30ab42f9c3784078b2
Validity
Not Before: Nov 5 08:00:04 2025 GMT
Not After : Nov 6 08:00:04 2025 GMT
Subject: CN=6e9c5b3ae9dc259e26ce0a8a00a12e1bf7131759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:91:f3:67:de:64:64:64:c4:5e:9a:62:83:5e:
11:87:7a:86:e7:a9:14:f1:5e:e0:13:22:b1:b0:7b:
c1:13:e0:95:13:ea:7b:12:ce:9d:03:c1:50:76:0f:
5f:40:b3:e7:dd:0b:99:de:e4:63:b4:20:ed:eb:65:
19:07:32:9c:16:c6:64:f6:0a:b1:4a:98:1a:9a:4a:
4d:b6:4b:6c:1a:fc:35:4e:c2:46:57:35:86:78:fc:
66:a8:b6:53:fa:a2:2f:18:41:9a:e5:10:e6:b3:34:
f2:44:4a:d1:b8:53:bc:df:e4:bc:c4:c5:fe:15:01:
cf:73:c2:e7:6e:d6:5a:98:56:25:30:75:d8:41:91:
a8:69:34:bf:d4:2b:21:91:e2:90:ca:4b:ee:b2:cd:
f8:6a:86:fa:19:9c:6f:82:97:f7:c8:5f:ad:49:05:
fe:18:03:d8:53:92:ab:06:f4:ec:f1:fd:a2:0c:54:
c6:15:84:5f:d0:11:f9:57:be:db:37:30:b8:65:ee:
8d:5d:6a:e2:c6:4a:1b:db:d0:4c:c4:4a:90:c3:b5:
a1:89:42:72:74:77:91:1c:29:aa:2e:84:99:f8:9d:
3f:b2:14:71:8f:15:63:39:e4:32:b3:72:dd:52:bc:
17:db:12:af:1b:1a:79:1e:9d:12:ed:fd:fa:f7:d9:
77:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:9C:5B:3A:E9:DC:25:9E:26:CE:0A:8A:00:A1:2E:1B:F7:13:17:59
X509v3 Authority Key Identifier:
keyid:9B:DB:A9:52:90:A9:85:A6:97:76:3D:30:AB:42:F9:C3:78:40:78:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d1:86:22:2e:02:69:96:a2:86:23:9e:7e:01:bd:f9:ee:00:
49:98:ae:c1:0d:59:bb:6f:bf:a8:d5:5c:c2:73:08:bc:8f:e6:
d4:ed:f0:cd:91:f9:92:14:78:1a:fa:23:9c:68:ef:1f:fa:ef:
e6:ed:9a:d6:b9:1a:77:61:a6:7d:db:11:1a:d2:37:40:d6:9e:
07:0c:d7:f2:fc:1f:50:ee:b4:09:c1:f4:d8:e2:8c:c0:5c:52:
6e:62:80:cf:6a:f7:0d:e2:a0:89:f1:bd:39:e2:61:05:23:d0:
77:7f:40:7d:8a:8b:e9:50:be:05:87:c9:55:73:f0:e4:1a:4e:
c4:16:c9:23:8a:65:7a:09:cd:36:9c:c0:ab:d7:71:06:be:ec:
16:3c:a6:5b:e1:80:7d:a4:58:86:7b:60:1e:49:32:1b:be:b6:
5d:7f:19:1c:53:a0:a6:96:f9:9a:cb:a6:b8:69:bf:ac:db:27:
46:14:28:53:ac:30:64:de:81:ab:41:06:9e:10:96:a2:73:fc:
27:a5:50:18:86:7f:56:14:8c:90:da:68:b7:89:82:86:68:c2:
42:99:bb:38:70:ad:b0:ff:4d:cd:cc:ae:ad:8c:7e:56:e3:ca:
0c:a0:de:c3:dd:9a:95:97:9c:70:80:3b:84:34:fc:da:73:b5:
d3:1b:8a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:30:00 2025 by rpki-client